U.S. Patent Application Serial No. 10/780,144 

Office Action Dated: April 10, 2009 

Reply To Office Action Mailed On July 10, 2009 



REMARKS/ ARGUMENTS 

This Amendment and the following remarks are intended to fully respond to the Office 
Action dated April 10, 2009, hereinafter "Office Action." In that Office Action, claims 1-26, 28- 
29, 31, 33, 36-56, and 58-66 were examined and all claims were rejected. Specifically, claims 1- 
26, 28-29, 31, 33, 36-56, and 58-66 were rejected under 35 U.S.C. § 112, second paragraph, as 
being indefinite for failing to particularly point out and distinctly claim the subject matter which 
Applicants regard as the invention. 

Reconsideration of these rejections, as they might apply to the original and amended 
claims in view of these remarks, is respectfully requested. In this Amendment, claims 1, 5, 9, 13, 
16, 21, 28, 31, 33, 36, 41, 45, 47, 50, 52, 54, 56, and 63-66 have been amended, and no claims 
have been canceled or added. Therefore, claims 1-26, 28-29, 31, 33, 36-56, and 58-66 remain 
present for examination. 

Applicants submit that claim amendments are supported throughout the specification, and 
in the claims as originally filed, and do not introduce new matter. For instance, support may be 
found in at least the following sections of the Specification: 

(1) Trust analyzer 210 assesses a level of trust to be accorded to detected object 208 
based on at least one of the content, source, or action associated with object 208. 
The level of trust accorded to object 208 influences whether the action for the 
object may be activated unimpeded, whether the action is suppressed while the 
user is provided an opportunity to interactively accept or decline activation of an 
action for the object, or whether the action for the object is blocked altogether. It 
is to be appreciated that other levels of trust and their consequences may be 
apparent to those skilled in the art, and further that the examples provided herein 
are not to be considered to be limiting. (Specification, at 5-6, para. [0025].) 

(2) Objects assessed to have a level of explicit trustworthiness may have their 
associated actions activated without impedance. All other objects have their 
associated actions suppressed by suppressor 215. User interface 220 is provided to 
advise a user of the suppression of an action for an object, and to further provide 
an opportunity for the user to interactively accept or decline activation of the 
action for the object. (Specification, at 6, para. [0026].) 

(3) A trust analysis is performed 325 on an action for an object 208 that is optionally 
determined 3 1 5 to not be user-initiated. As set forth above with regard to FIG. 2, a 
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level of trust is accorded to detected object 208 based on, for example, at least one 
of the content, source, and action associated with object 208, when the security 
settings of the browser have been assessed. Thus, the levels of trust may be 
considered to be tiered. That is, more than being determined to be merely trusted 
or untrusted, object 208 may be accorded a variable level of trust in accordance 
with the content, source, and action corresponding to object 208. The level of trust 
for object 208 influences which option within activation opportunity 320 may be 
implemented for the action of object 208. Trust analysis 325 will be described in 
further detail with reference to the examples of FIGS. 4-7. (Specification, at 8, 
para. [0033].) 

(4) When object 208 is not accorded at least a threshold level of trust based on 
variable combinations of the content, source, and action thereof, the object is 
blocked 330. When an object is blocked, the action for the object is suppressed. 
Thus, any attempt to load code, open an HTML document, and access and/or open 
a data file, is unsuccessful without a user interactively accepting an opportunity to 
unblock the object. (Specification, at 8, para. [0034].) 

(5) FIG. 4 describes an example in which a trust level analysis is performed on a non- 
user activated code download on the browser; FIG. 5 describes an example in 
which a trust level analysis is performed on a code download that may or may not 
be safely performed on the browser. (Specification, at 9, para. [0038].) 

(6) The trust level analysis 325 for a non-user activated code download determines 
whether the source of object 208 is trusted. A source may be determined to be 
trusted if content from the source already exists on computing device 105, or if 
other security settings of computing device 105 have otherwise indicated that the 
content from the source of object 208 is acceptable on computing device 105. 
(Specification, at 11, para. [0042].) 

(7) Alternatively, a source may be deemed to be explicitly untrusted if no certificate 
exists on the downloaded code, if the user has previously chosen to not trust the 
publisher referenced by the certificate, or depending upon the security settings of 
the browser. (Specification, at 1 1, para. [0044].) 

Claims Rejected Under 35 USC § 112 

Claims 1-26, 28, 29, 31, 33, 36-56, and 58-66 were rejected under 35 U.S.C. § 112, 
second paragraph, as being indefinite for failing to particularly point out and distinctly claim the 
subject matter which Applicants regard as the invention. In the interest of furthering the 
prosecution of the subject application, Applicants have amended the claims to remove the 
limitation "wherein the object does not include a downloadable security profile, generated by an 
external content inspection engine, attached thereto" and "without using the downloadable 
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security profile, or generating the downloadable security profile at the client device," as was 
previously recited in claim 1. As such, the Examiner's rejections are rendered moot and 
Applicants respectfully request that the Examiner withdraw the rejection at the Examiner's 
earliest convenience. 

Applicants have made further amendments to the claims that are fully supported by the 
Specification, as detailed above. Applicants submit that these amendments place the claims in 
condition for allowance and Applicants respectfully request that the Examiner issue a Notice of 
Allowance at Examiner's earliest convenience. 
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CONCLUSION: 

This Amendment fully responds to the Office Action mailed on April 10, 2009. Still, that 
Office Action may contain arguments and rejections that are not directly addressed by this 
Amendment due to the fact that they are rendered moot in light of the preceding arguments in 
favor of patentability. Hence, failure of this Amendment to directly address an argument raised 
in the Office Action should not be taken as an indication that the Applicants believe the 
argument has merit. Furthermore, the claims of the present application may include other 
elements, not discussed in this Amendment, which are not shown, taught, or otherwise suggested 
by the references of record. Accordingly, the preceding arguments in favor of patentability are 
advanced without prejudice to other bases of patentability. 

It is believed that no further fees are due with this Amendment. However, the 
Commissioner is hereby authorized to charge any deficiencies or credit any overpayment with 
respect to this patent application to deposit account number 13-2725. 

In light of the above remarks and amendments, it is believed that the application is now 
in condition for allowance and such action is respectfully requested. Should any additional 
issues need to be resolved, the Examiner is requested to telephone the undersigned to attempt to 
resolve those issues. 



Respectfully submitted, 



MERCHANT & GOULD P.C. 
P.O. Box 2903 

Minneapolis, Minnesota 55402-0903 
(303)357-1641/ 




27488 



By: Lf/A 

David SOehn-Carkin, 
Attorney for Applicant 



Date: June 9, 2009 
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